Re: encode php scripts with opcache compatibility

On Thu, 2014-05-22 at 16:54 +0200, Bas van Beek wrote: > > Mind that a user could simply do something like this in an > > auto_append_file to get all scripts: > > > > <?php > > foreach (get_included_files() as $filename) { > > $sourcecode[$filename] = file_get_contents($filename); > > } > > ?> > > > > So this ains little over using a phar file. > Maybe I'm missing something but I don't see that happen if PHP is > embedded in the C++ application through its own SAPI handler which will > not pick up any ini directives from external php.ini files. If you are not giving scripting access to the user so they can't execute (well, they might attach a debugger and call zend_eval_string() etc.) PHP code than this is ok. My response was mostly to Kevin, whom I understood in a way as we was up to making this a general purpose "source code hiding extension" for "normal" deployments. johannes